Please enable JavaScript.

Coggle requires JavaScript to display documents.

AZ-900 - Coggle Diagram

- - - - Heart of Authentication
      - It can work for in house applications, other cloud services also
      - If u have any microsoft service, you have to use Azure AD service
      - Few other services in this caterogy
        
        Azure AD (single sign on)
        
        Azure AD Domain Services
        
        PaaS Offering
        
        Active Directory Domain Services (gives all features given by traditional Active directory)
      - Create Users
      - Create Group
  - - - Azure RBAD -> tool -> shared access
      - Roles -> group permissions
      - Users/Groups -> become members of Roles
      - Built-in Roles (already available)
        
        Owner
        
        Contributor
        
        Reader
        
        There are may other predefined Roles
      - Best Practices
        
        Try using Build-in Roles
        
        Create Custome Roles (if built in Role not suitable)
        
        Allow least possible Privilege
    - - Authentication
      - Authorization
  - - - It Filter's traffic (Allow/Deny, inbound/outbound traffic)
      - contains Rules
        
        Rules order (100 to 4096)
        
        100 - Processed first
        
        4096 -> Processed Last
      - Attached to
        
        Subnets
        
        Network cards
      - can be linked to multiple resources
      - stateful
        
        if you allow inbound traffic from an ip address, outbound will also be allowed
      - Some of properties
        1) Name
        2) Priority
        3) Source or destination
        4) Protocol
        5) Direction
        6) Port range
        7) Action
      - NSG should be in the same region where our servers/resources are located
      - Problems
        
        Can become Complex
        
        Can be difficult to maintain
      - Solving NSG Problems
        
        Use Service tags
        
        Use the default security rules
        
        Use application security groups
    - - It's can't exist independently, it need NSG's
      - Used as source or destination in NSG
      - How it works
        
        Create application security group
        
        link group of resources
        
        use ASG when working with NSG
  - - - Secure Azure deployment
      - Cost-effective Azure Deployment
      - Stateful firewall service
      - Protects access to Virtual network
      - Features
        
        Threat intelligence
        
        Outbound and inbound NAT support
        
        Integration with Azure Monitor
        
        Network traffic filtering rules
    - - Azure firewall work with this together
      - Always monitoring
      - Gives Application layer protection
      - Features
        
        Multi-layer protection
        
        Attack analytics
        
        Scale and elasticity
        
        Protection against unplanned costs
      - Service Tiers
        
        Basic
        
        Standard
  - - - Solution for Internet Communication
    - - Solution for Azure hosted SQL server
    - - Route Internet traffic
  - - - Azure Monitor
      - Azure service health
      - Azure advanced threat protection
- - - - Google Compute Engine,
        Microsoft Azure,
        Amazon Web Services
      - Azure Logic Apps,
        Amazon Elastic Beanstalk,
        Heroku
      - Office 365,
        Google G Suite
        Salesforce
        Dropbox
    - - Azure Compute (Virtual Machine),
        Azure Storage
      - Azure Logic Apps,
        Azure Functions,
        Azure Web Jobs,
        Azure Automation
      - SharePoint,
        OneDrive for Business,
        Microsoft Teams,
        Power Platform
    - - Test and development,
        Storage and backups,
        High performance computing,
        Big data analysis
      - Application and Data managed by company
  - - - Analytics or business intelligence,
        Development framework,
      - Access sophisticated apps,
        Mobilize your workforce